CVE-2022-26923 PoC — Microsoft Windows Active Directory 信任管理问题漏洞

Description

Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services

介绍

# TryHackMe-CVE-2022-26923
Walkthrough on the exploitation of CVE-2022-26923, a vulnerability in AD Certificate Services
# CVE-2022-26923
[TryHackMe | CVE-2022-26923](https://tryhackme.com/room/cve202226923)
## Task 1 Introduction
[Security Update Guide - Microsoft Security Response Center](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26923)

[TryHackMe | Active Directory Basics](https://tryhackme.com/room/activedirectorybasics)

[Certified Pre-Owned. Active Directory Certificate Services… | by Will Schroeder | Posts By SpecterOps Team Members](https://posts.specterops.io/certified-pre-owned-d95910965cd2)

[TryHackMe | AD Certificate Templates](https://tryhackme.com/room/adcertificatetemplates)

[Oliver Lyak](https://twitter.com/ly4k_)

[Certifried: Active Directory Domain Privilege Escalation (CVE-2022–26923) | by Oliver Lyak | May, 2022 | IFCR](https://research.ifcr.dk/certifried-active-directory-domain-privilege-escalation-cve-2022-26923-9e098fe298f4)
## Task 2 A brief look at certificate templates

文件快照

备注